Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: 0LfEjoHVmubkMbhQjMubxdykREpJPAPQPf/73zfibtg=
Subject key identifier: 62:85:50:25:D6:E2:16:7F:1A:FD:C2:40:66:8B:03:0B:FA:83:22:46
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 0197B70ED9983FFF668DFB31B8BEAE6218F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 09AE
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: Qxuw1OyhoIC3LI6lGuRDtZ4zWbNzvRtQvT6HswTd7Fk=)
2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d9:98:3f:ff:66:8d:fb:31:b8:be:ae:62:18:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=62855025d6e2167f1afdc240668b030bfa832246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f9:03:7f:10:2a:a7:48:98:9d:ae:fe:0f:28:
29:78:9b:6d:73:bc:eb:12:67:47:a9:2e:91:af:8f:
80:7d:68:61:c6:72:5a:ba:fc:6d:5b:3a:e5:6f:6b:
c3:87:43:60:39:7a:a5:da:df:e5:8c:5b:fa:08:1e:
46:a0:74:66:1f:df:a1:9f:ae:33:9d:fe:00:d0:6b:
9b:95:ba:66:48:ac:f4:f1:5c:22:a1:cb:a5:83:f0:
4c:ef:bc:93:58:c6:51:36:dc:84:4f:42:99:1e:d9:
2a:31:76:15:15:ec:67:48:c5:d1:67:9c:d8:84:f4:
bb:4e:34:05:4c:8d:c0:48:2a:50:d0:39:3d:8c:ef:
4b:f5:b5:66:b0:bf:d0:8b:0e:68:cb:42:a7:fa:1c:
39:1c:ca:bb:52:a6:38:03:53:3a:d6:d5:66:70:67:
c9:9d:a4:5e:eb:7b:be:a8:ee:a6:e4:21:a2:94:fe:
08:22:e6:21:fe:b3:bd:ca:0b:bd:17:b4:71:b5:2c:
38:21:fe:54:fe:00:f3:79:34:28:86:72:80:a1:a3:
3d:25:55:c2:1d:ef:d2:4a:fa:d3:e1:00:44:e2:b9:
64:87:36:f1:ec:bc:99:bf:30:b0:82:54:44:05:97:
44:80:9e:46:1b:04:b4:68:c6:0e:0c:c3:c7:8f:47:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:85:50:25:D6:E2:16:7F:1A:FD:C2:40:66:8B:03:0B:FA:83:22:46
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:aa:cb:97:43:cb:e5:a9:e4:15:ed:c6:30:ae:de:97:6e:77:
e7:56:7e:61:e0:d6:c1:9f:f6:8a:c0:fc:9b:92:3a:7e:da:97:
bf:7e:90:c2:78:14:85:5c:d8:41:b6:e0:aa:45:08:02:ee:21:
85:a0:64:95:63:5d:e9:10:b6:d0:96:8b:52:91:5c:92:a8:60:
ed:3f:eb:2c:b8:3a:4a:8b:34:64:17:ec:bb:66:31:7f:a4:73:
b0:0a:6d:f1:64:da:4b:79:66:5a:d2:65:d0:62:bd:62:fb:52:
ff:29:d9:24:86:ea:1d:22:ce:25:8f:81:e3:42:18:47:55:38:
e5:c2:95:5b:c1:5a:97:37:52:a3:8f:6d:4d:c7:05:18:a7:0a:
66:16:34:08:a9:c6:f6:b8:df:71:cb:ae:17:4d:7d:f2:74:ef:
d6:a9:e3:55:ea:61:35:e2:a9:7b:99:91:1b:a0:70:1b:c7:4e:
2d:fd:36:9b:34:26:86:49:20:95:9a:a2:96:a8:ff:ea:e6:d9:
75:03:8f:33:37:77:a4:b1:f5:0f:13:7d:d7:67:10:92:5f:32:
aa:75:91:89:7d:f7:e3:41:28:a0:3a:80:6e:ef:d4:8f:00:f4:
b4:01:50:66:27:fa:a2:db:79:60:0a:aa:05:dd:88:ae:6f:be:
37:a0:72:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DtmYP/9mjfsxuL6uYhjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhOGQxOWFkMzFjODRhNzQ4NTZiMGE2YjNjYzEwMGU0N2Ey
YjJhYWMwHhcNMjUwNjI4MTUwMTMzWhcNMjUwNjI5MTUwMTMzWjAzMTEwLwYDVQQD
Eyg2Mjg1NTAyNWQ2ZTIxNjdmMWFmZGMyNDA2NjhiMDMwYmZhODMyMjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvkDfxAqp0iYna7+DygpeJttc7zr
EmdHqS6Rr4+AfWhhxnJauvxtWzrlb2vDh0NgOXql2t/ljFv6CB5GoHRmH9+hn64z
nf4A0GublbpmSKz08Vwioculg/BM77yTWMZRNtyET0KZHtkqMXYVFexnSMXRZ5zY
hPS7TjQFTI3ASCpQ0Dk9jO9L9bVmsL/Qiw5oy0Kn+hw5HMq7UqY4A1M61tVmcGfJ
naRe63u+qO6m5CGilP4IIuYh/rO9ygu9F7RxtSw4If5U/gDzeTQohnKAoaM9JVXC
He/SSvrT4QBE4rlkhzbx7LyZvzCwglREBZdEgJ5GGwS0aMYODMPHj0emHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKFUCXW4hZ/Gv3CQGaLAwv6gyJGMB8GA1UdIwQY
MBaAFIqNGa0xyEp0hWsKazzBAOR6KyqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgt
MjQwMjM0MDNiYjBjLzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mZjYzYTgtOTc0Yy00Y2NjLThjZDgtMjQwMjM0MDNiYjBj
LzEvaW8wWnJUSElTblNGYXdwclBNRUE1SG9yS3F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABarLl0PL
5ankFe3GMK7el25351Z+YeDWwZ/2isD8m5I6ftqXv36QwngUhVzYQbbgqkUIAu4h
haBklWNd6RC20JaLUpFckqhg7T/rLLg6Sos0ZBfsu2Yxf6RzsApt8WTaS3lmWtJl
0GK9YvtS/ynZJIbqHSLOJY+B40IYR1U45cKVW8FalzdSo49tTccFGKcKZhY0CKnG
9rjfccuuF0198nTv1qnjVephNeKpe5mRG6BwG8dOLf02mzQmhkkglZqilqj/6ubZ
dQOPMzd3pLH1DxN912cQkl8yqnWRiX3340EooDqAbu/UjwD0tAFQZif6ott5YAqq
Bd2Irm++N6ByEg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:51 2025 by rpki-client